This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json) Hash identifier: aPZa8uKMOr/0lKTc+Ac75WfRrRvNVIFx3dNiVWImEKc= Subject key identifier: 9E:57:49:76:B6:E0:4A:8D:36:09:97:8B:18:A3:4A:5C:A2:EE:FB:F0 Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02 Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202 Certificate serial: 019C41D8AA7130FBBB3B3D386B85BAA02AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft Manifest number: 0356 Signing time: Mon 09 Feb 2026 10:00:44 +0000 Manifest this update: Mon 09 Feb 2026 10:00:44 +0000 Manifest next update: Tue 10 Feb 2026 10:00:44 +0000 Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: ZgeWkjprS+HweGop7UytNKtp45gN7DTvKcxTV7tPTsA=) 2: RlG57nnNxGB2HezUW2iS9nc3Ags.roa (hash: 3PbLinbQVfE8cbPE3bd3pNL44DfI1Jhqjnzqheow9+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:aa:71:30:fb:bb:3b:3d:38:6b:85:ba:a0:2a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202 Validity Not Before: Feb 9 10:00:44 2026 GMT Not After : Feb 10 10:00:44 2026 GMT Subject: CN=9e574976b6e04a8d3609978b18a34a5ca2eefbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:05:f7:83:a0:0d:4f:89:74:d1:b8:ce:5e: 95:5b:f9:e8:25:6e:cf:fe:67:b4:74:2a:d1:e0:d0: eb:f0:f7:ad:c2:fa:7a:ba:8a:a3:ea:cf:8e:7e:29: 7e:20:8f:14:8c:5c:a0:03:c0:92:95:29:13:08:ba: 41:cb:37:a9:f8:20:ae:c0:10:59:ea:d9:47:63:73: 30:d9:41:86:1c:9a:c1:81:e6:e2:bb:3f:ac:a1:2d: ab:c4:11:37:d8:39:a2:4d:f7:89:a4:2c:1a:e9:76: ed:98:ee:2b:1c:b4:ee:2e:42:30:07:eb:cf:50:d2: cd:93:54:e3:08:64:3f:7c:51:60:2d:18:d2:ad:e2: c5:10:5d:a3:27:28:e9:14:20:25:7f:15:a0:fb:2b: 0a:12:c3:2f:4b:97:3b:a6:b5:d3:5a:a6:0f:51:0b: f1:af:f8:fd:6c:ab:4f:f6:52:d8:07:b0:26:35:1a: 2b:9a:23:d3:fc:07:1c:06:f1:93:15:73:c5:6e:9e: ba:cc:48:77:c6:23:80:4b:4a:5b:25:8c:17:e2:5e: 8c:28:ff:20:b1:3d:44:34:2d:be:e4:ce:f2:2b:a0: 8b:9f:fe:f8:17:ed:02:5a:1b:6c:45:6f:01:0e:f7: 91:8f:6b:f2:ba:9b:ff:ca:6b:55:0d:59:5b:95:71: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:49:76:B6:E0:4A:8D:36:09:97:8B:18:A3:4A:5C:A2:EE:FB:F0 X509v3 Authority Key Identifier: keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e8:4e:0d:7b:6a:49:dd:68:e3:ab:1c:72:75:53:82:85:62: fd:a7:17:7f:7a:2b:26:e8:30:a6:51:6f:58:8e:65:6e:53:10: 68:65:cf:0f:06:2c:9c:aa:5c:ec:5e:e6:37:ef:4e:34:fa:ef: fe:81:ac:02:c9:59:61:a8:19:01:2e:35:02:b2:7f:40:8a:15: af:09:1d:f3:f8:5c:40:4d:44:57:2e:b3:a5:73:e8:61:6c:5c: a3:5e:5a:3a:e8:2e:81:7a:62:81:f4:84:63:b0:d9:56:35:70: 6e:ad:51:b7:5c:83:65:b5:3d:39:17:48:b4:27:0c:bb:8d:02: 65:1b:91:ed:20:9d:14:bd:ed:72:52:33:64:09:31:ae:8d:c9: 6a:3f:66:f2:1f:a0:4d:d7:12:99:25:86:1c:d6:49:e9:68:af: 5c:ed:41:18:44:59:b8:72:b3:6d:98:44:9c:fe:13:0a:ff:22: 94:92:94:89:db:68:a9:b8:c2:d1:70:36:8a:2c:27:85:df:6b: 85:7c:43:77:d5:0c:11:be:0f:cc:12:87:94:c5:33:70:32:59: 16:dc:e2:02:53:99:e1:a9:9c:d6:f5:e5:51:fd:03:28:1a:b2: f8:7a:b4:db:30:29:49:26:db:c8:f6:56:ed:29:7d:5b:b7:29: 10:eb:38:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KpxMPu7Oz04a4W6oCqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjczYzE1ZWE0NWRmMzcxOTNlMzQ1YjY5ZWRkODNmOGM2 ZjIyMDIwHhcNMjYwMjA5MTAwMDQ0WhcNMjYwMjEwMTAwMDQ0WjAzMTEwLwYDVQQD Eyg5ZTU3NDk3NmI2ZTA0YThkMzYwOTk3OGIxOGEzNGE1Y2EyZWVmYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8F94OgDU+JdNG4zl6VW/noJW7P /me0dCrR4NDr8Petwvp6uoqj6s+Ofil+II8UjFygA8CSlSkTCLpByzep+CCuwBBZ 6tlHY3Mw2UGGHJrBgebiuz+soS2rxBE32DmiTfeJpCwa6XbtmO4rHLTuLkIwB+vP UNLNk1TjCGQ/fFFgLRjSreLFEF2jJyjpFCAlfxWg+ysKEsMvS5c7prXTWqYPUQvx r/j9bKtP9lLYB7AmNRormiPT/AccBvGTFXPFbp66zEh3xiOAS0pbJYwX4l6MKP8g sT1ENC2+5M7yK6CLn/74F+0CWhtsRW8BDveRj2vyupv/ymtVDVlblXEtXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5XSXa24EqNNgmXixijSlyi7vvwMB8GA1UdIwQY MBaAFEAnPBXqRd83GT40W2nt2D+MbyICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUt MzAzYzlhMTE4ODZiLzEvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUtMzAzYzlhMTE4ODZi LzEvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOhODXtq Sd1o46sccnVTgoVi/acXf3orJugwplFvWI5lblMQaGXPDwYsnKpc7F7mN+9ONPrv /oGsAslZYagZAS41ArJ/QIoVrwkd8/hcQE1EVy6zpXPoYWxco15aOugugXpigfSE Y7DZVjVwbq1Rt1yDZbU9ORdItCcMu40CZRuR7SCdFL3tclIzZAkxro3Jaj9m8h+g TdcSmSWGHNZJ6WivXO1BGERZuHKzbZhEnP4TCv8ilJKUidtoqbjC0XA2iiwnhd9r hXxDd9UMEb4PzBKHlMUzcDJZFtziAlOZ4amc1vXlUf0DKBqy+Hq02zApSSbbyPZW 7Sl9W7cpEOs4Kw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:58 2026 by rpki-client